ait-aecid repositories

44 repositories

logdata-anomaly-miner
Public
This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and lowest p…
python linux security
python linux security log-analysis detection logging cybersecurity ids intrusion-detection hids
Python
•
GNU General Public License v3.0
•22•93•13•3•Updated Aug 26, 2026Aug 26, 2026
rootkit-detection-ebpf-time-trace
Public
Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.
machine-learning intrusion-detection hids
machine-learning intrusion-detection hids ebpf anomaly anomaly-detection semi-supervised rootkits kernel-tracing rootkit-detection
Python
•
GNU General Public License v3.0
•3•30•0•0•Updated Aug 21, 2026Aug 21, 2026
caraxes
Public
Academic research rootkit using ftrace-hooking to hide files and processes via magic word or user/group. Tested until Linux 6.11.
linux kernel-module rootkit
linux kernel-module rootkit linux-kernel stealthkit ftrace-hooking file-hiding
C
•
GNU General Public License v3.0
•4•50•2•0•Updated Aug 21, 2026Aug 21, 2026
llm-user-shell-sim
Public
user behavior simulation for shell-based access using LLMs
Python
•0•0•0•0•Updated Aug 13, 2026Aug 13, 2026
attack-manifestations-interpretation
Public
Scripts to analyze the CAM-LDS using LLMs
log-analysis intrusion-detection security-alerts
log-analysis intrusion-detection security-alerts attack-classification cyber-attacks log-data llm-interpretation attack-manifestations
Python
•
GNU General Public License v3.0
•1•5•0•0•Updated Jul 17, 2026Jul 17, 2026
alert-data-set
Public
Scripts to generate and analyze the AIT alert data set (AIT-ADS)
alerts ids intrusion-detection
alerts ids intrusion-detection anomaly-detection attack-graphs log-data meta-alerts alert-correlation alert-prioritizaion
Python
•
GNU General Public License v3.0
•1•35•1•0•Updated Jun 17, 2026Jun 17, 2026
log_parsing_benchmark
Public
A repository for benchmarking log parsers in different operational settings.
Python
•
GNU General Public License v3.0
•0•0•0•0•Updated Jun 5, 2026Jun 5, 2026
log-interpretation-prompt-injection
Public
Adversarial prompt injection into system log data (audit, access logs) to influence LLM-based log interpretation tasks
Python
•0•1•0•0•Updated Jun 1, 2026Jun 1, 2026
aminer-rest
Public
REST-API for the logdata-anomaly-miner
Python
•
GNU General Public License v3.0
•3•1•1•0•Updated Apr 24, 2026Apr 24, 2026
cids-evaluation
Public
Evaluation of log-based collaborative intrusion detection systems
Python
•
GNU General Public License v3.0
•0•0•0•0•Updated Feb 6, 2026Feb 6, 2026
comparison-fed-centr-efficient-ad
Public
Python
•
GNU General Public License v3.0
•0•1•0•0•Updated Dec 20, 2025Dec 20, 2025
AlertBERT
Public
AlertBERT is a state-of-the-art self-supervised alert grouping method based on masked-language-models and agglomerative clustering to work under high levels of …
machine-learning cybersecurity bert-model
machine-learning cybersecurity bert-model alert-aggregation log-data-analysis
Jupyter Notebook
•
GNU General Public License v3.0
•1•2•0•0•Updated Dec 16, 2025Dec 16, 2025
LLM-log-parsing
Public
Python
•1•10•0•0•Updated Dec 11, 2025Dec 11, 2025
llm-alert-interpretation
Public
LLM-based alert interpretation
Python
•
European Union Public License 1.2
•0•0•0•0•Updated Nov 30, 2025Nov 30, 2025
aminer-ansible
Public
Ansible-Role for the logdata-anomaly-miner
ansible ansible-role
ansible ansible-role
3•3•0•0•Updated Nov 24, 2025Nov 24, 2025
anomaly-detection-log-datasets
Public
Analysis scripts for log data sets used in anomaly detection.
python review machine-learning
python review machine-learning hadoop unsupervised logs survey hdfs sequences bgl
Python
•
GNU General Public License v3.0
•17•85•0•0•Updated Oct 19, 2025Oct 19, 2025
log-gym
Public
Anomaly detection challenges for log data
Jupyter Notebook
•
GNU General Public License v3.0
•0•0•0•0•Updated Sep 25, 2025Sep 25, 2025
aminer-configuration-engine
Public
This code allows to generate configurations for the logdata-anomaly-miner (AMiner) based on static log file analysis.
Python
•
GNU General Public License v3.0
•0•1•0•0•Updated Nov 27, 2024Nov 27, 2024
log-preprocessor
Public
This repository contains methods to prepare log data for analysis (extract values, split train/test, etc.)
Jupyter Notebook
•2•1•0•0•Updated Nov 19, 2024Nov 19, 2024
aecid-alert-aggregation
Public
A method for grouping, clustering, and merging semi-structured alerts
json machine-learning alerts
json machine-learning alerts unsupervised clustering logs similarity ids intrusion-detection hids
Python
•
GNU General Public License v3.0
•7•27•1•0•Updated Nov 15, 2024Nov 15, 2024
evaluation-suite
Public
Roff
•
GNU General Public License v3.0
•0•0•0•0•Updated Oct 24, 2024Oct 24, 2024
aminer-deep
Public
Python
•1•0•0•0•Updated Jul 3, 2024Jul 3, 2024
kyoushi-environment
Public
Scripts to deploy virtual testbed for log data analysis and anomaly detection.
security data-mining monitoring
security data-mining monitoring simulation logs ids hids nids anomaly-detection cyber-attacks
Jinja
•
GNU General Public License v3.0
•5•28•2•3•Updated Nov 21, 2023Nov 21, 2023
aecid-parsergenerator
Public
Automatically create parser trees for textual logdata to facilitate analysis
python parser templates
python parser templates logs hdfs parser-generation log-data log-signatures log-templates
Python
•
GNU General Public License v3.0
•3•3•3•0•Updated Apr 19, 2023Apr 19, 2023
count-vector-clustering
Public
Python
•
GNU General Public License v3.0
•0•1•0•0•Updated Mar 16, 2023Mar 16, 2023
stide
Public
Evaluation of the stide algorithm on system log data
Python
•
GNU General Public License v3.0
•0•2•0•0•Updated Mar 2, 2023Mar 2, 2023
clue-lds
Public
This repository contains scripts to carry out anomaly detection in the CLUE log data set.
anomaly-detection ueba user-behavior-analytics
anomaly-detection ueba user-behavior-analytics log-data-analysis
Python
•
GNU General Public License v3.0
•1•10•0•0•Updated Jan 30, 2023Jan 30, 2023
semtech-loratool
Public
This util sends encrypted lorapackets using the semtech udp-protocol to the gateway.
exploit lorawan semtech
exploit lorawan semtech
Python
•
GNU General Public License v3.0
•0•0•0•0•Updated Aug 18, 2022Aug 18, 2022
aminer-amqtt
Public
mqtt
mqtt
Python
•
GNU General Public License v3.0
•1•0•0•0•Updated Aug 18, 2022Aug 18, 2022
aecid-jsonparsergenerator
Public
Automatically create parser trees for logdata available in JSON format to facilitate analysis
Python
•
GNU General Public License v3.0
•1•0•0•0•Updated May 27, 2022May 27, 2022

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Navigation Menu

AECID

All

44 repositories

logdata-anomaly-miner

rootkit-detection-ebpf-time-trace

caraxes

llm-user-shell-sim

attack-manifestations-interpretation

alert-data-set

log_parsing_benchmark

log-interpretation-prompt-injection

aminer-rest

cids-evaluation

comparison-fed-centr-efficient-ad

AlertBERT

LLM-log-parsing

llm-alert-interpretation

aminer-ansible

anomaly-detection-log-datasets

log-gym

aminer-configuration-engine

log-preprocessor

aecid-alert-aggregation

evaluation-suite

aminer-deep

kyoushi-environment

aecid-parsergenerator

count-vector-clustering

stide

clue-lds

semtech-loratool

aminer-amqtt

aecid-jsonparsergenerator

Repositories list

44 repositories